Description
WordPress Plugin Download Plugin is prone to a vulnerability that lets attackers download arbitrary directories because the application fails to sufficiently verify user-supplied input. This may allow an attacker to gain access to sensitive information, which may aid in launching further attacks. WordPress Plugin Download Plugin version 1.0.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.2 or latest
References
Related Vulnerabilities
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.34)
WordPress Plugin File Manager Multiple Cross-Site Request Forgery Vulnerabilities (5.0)
WordPress Plugin WP Mail SMTP by WPForms Cross-Site Scripting (1.3.3)
Squid Improper Input Validation Vulnerability (CVE-2014-0128)
WordPress Plugin Cookie Information-Free GDPR Consent Solution Privilege Escalation (1.4.2)